From: Rich S. <ri...@nd...> - 2011-05-11 15:49:03
|
Jarrod B Johnson wrote: > Oh well, for reference, the most common offender is that the vendor > neglected to implement server to client authentication, which makes IPMI > vulnerable to man-in-the-middle. IBM is at least one vendor that gets > this right ;) I'm reluctant to change our code to allow > man-in-the-middle exploits, which currently ipmitool is exposed to. Yes I agree - We have a couple Idataplex's and they're great to work with ;-) > > Inactive hide details for Rich Sudlow ---05/11/2011 11:40:33 AM---Jarrod > B Johnson wrote: > Unfortunately, the strace is only sRich Sudlow > ---05/11/2011 11:40:33 AM---Jarrod B Johnson wrote: > Unfortunately, the > strace is only showing client activity. You can try > > From: Rich Sudlow <ri...@nd...> > To: xCAT Users Mailing list <xca...@li...> > Date: 05/11/2011 11:40 AM > Subject: Re: [xcat-user] rpower problems after update > > ------------------------------------------------------------------------ > > > > Jarrod B Johnson wrote: > > Unfortunately, the strace is only showing client activity. You can try > > this IPMI.pm file in/opt/xcat/lib/perl/xCAT/ and service xcatd restart. > > If my best guess is right, it will give you BUG output. If it doesn't, > > tshark or tcpdump to get a pcap (with a filter on udp port 623 and > > ddcopt037-bmc). > > > > /(See attached file: IPMI.pm)/ > > > > If you really don't care at all about IPMI 2.0, you can alternatively > > change: > > > > my $ipmi2support = eval { > > require Digest::SHA1; > > Digest::SHA1->import(qw/sha1/); > > require Digest::HMAC_SHA1; > > Digest::HMAC_SHA1->import(qw/hmac_sha1/); > > 1; > > }; > > > > to: > > my $ipmi2support = 0; > > > > In your IPMI.pm to disable the IPMI 2.0 encryption/auth stuff. > > > Thanks Jarrod - Turning off the IPMI 2.0 stuff worked!! Will do what I > can to get rid of those machines ASAP! > > Thanks - this is one of the reasons xcat is so great!! > > Rich > > > > > Inactive hide details for Rich Sudlow ---05/11/2011 11:10:17 AM---Jarrod > > B Johnson wrote: > ipmitool -I lanplus to the systems Rich Sudlow > > ---05/11/2011 11:10:17 AM---Jarrod B Johnson wrote: > ipmitool -I > > lanplus to the systems give any weird issues? > > > > From: Rich Sudlow <ri...@nd...> > > To: xCAT Users Mailing list <xca...@li...> > > Date: 05/11/2011 11:10 AM > > Subject: Re: [xcat-user] rpower problems after update > > > > > > > > > > Jarrod B Johnson wrote: > > > ipmitool -I lanplus to the systems give any weird issues? > > > > > > [root@opt-mgmt tmp]# ipmitool -I lanplus -U root -P changeme -H > > ddcopt037-bmc > > chassis power status > > Chassis Power is on > > [root@opt-mgmt tmp]# rpower ddcopt037 stat > > ddcopt037: Error: timeout > > > > I'm also attaching a strace of rpower ddcopt037 stat > > > > Rich > > > > > > > > Inactive hide details for Rich Sudlow ---05/11/2011 10:09:29 > AM---After > > > updating to Xcat 2.5.1 I noticed that rpower for some o Rich Sudlow > > > ---05/11/2011 10:09:29 AM---After updating to Xcat 2.5.1 I noticed > that > > > rpower for some of our older Sun X2200 and X4100 machine > > > > > > From: Rich Sudlow <ri...@nd...> > > > To: xCAT Users Mailing list <xca...@li...> > > > Date: 05/11/2011 10:09 AM > > > Subject: [xcat-user] rpower problems after update > > > > > > > > > > > > > > > After updating to Xcat 2.5.1 I noticed that rpower for some of > > > our older Sun X2200 and X4100 machines ceased working giving > > > a timeout all the time - is this a known problem? any > > > quick workarounds? > > > > > > Thanks, > > > > > > Rich > > > -- > > > Rich Sudlow > > > University of Notre Dame > > > Center for Research Computing - Union Station > > > 310 West South St > > > South Bend, In 46601 > > > > > > (574) 807-1046 (cell) > > > > > > > > > ------------------------------------------------------------------------------ > > > Achieve unprecedented app performance and reliability > > > What every C/C++ and Fortran developer should know. > > > Learn how Intel has extended the reach of its next-generation tools > > > to help boost performance applications - inlcuding clusters. > > > http://p.sf.net/sfu/intel-dev2devmay > > > _______________________________________________ > > > xCAT-user mailing list > > > xCA...@li... > > > https://lists.sourceforge.net/lists/listinfo/xcat-user > > > > > > > > > > > > > ------------------------------------------------------------------------ > > > > > > > > > ------------------------------------------------------------------------------ > > > Achieve unprecedented app performance and reliability > > > What every C/C++ and Fortran developer should know. > > > Learn how Intel has extended the reach of its next-generation tools > > > to help boost performance applications - inlcuding clusters. > > > http://p.sf.net/sfu/intel-dev2devmay > > > > > > > > > > ------------------------------------------------------------------------ > > > > > > _______________________________________________ > > > xCAT-user mailing list > > > xCA...@li... > > > https://lists.sourceforge.net/lists/listinfo/xcat-user > > > > > > -- > > Rich Sudlow > > University of Notre Dame > > Center for Research Computing - Union Station > > 310 West South St > > South Bend, In 46601 > > > > (574) 807-1046 (cell) > > [attachment "typescript" deleted by Jarrod B Johnson/Raleigh/IBM] > > > ------------------------------------------------------------------------------ > > Achieve unprecedented app performance and reliability > > What every C/C++ and Fortran developer should know. > > Learn how Intel has extended the reach of its next-generation tools > > to help boost performance applications - inlcuding clusters. > > > http://p.sf.net/sfu/intel-dev2devmay_______________________________________________ > > xCAT-user mailing list > > xCA...@li... > > https://lists.sourceforge.net/lists/listinfo/xcat-user > > > > > > ------------------------------------------------------------------------ > > > > > ------------------------------------------------------------------------------ > > Achieve unprecedented app performance and reliability > > What every C/C++ and Fortran developer should know. > > Learn how Intel has extended the reach of its next-generation tools > > to help boost performance applications - inlcuding clusters. > > http://p.sf.net/sfu/intel-dev2devmay > > > > > > ------------------------------------------------------------------------ > > > > _______________________________________________ > > xCAT-user mailing list > > xCA...@li... > > https://lists.sourceforge.net/lists/listinfo/xcat-user > > > -- > Rich Sudlow > University of Notre Dame > Center for Research Computing - Union Station > 310 West South St > South Bend, In 46601 > > (574) 807-1046 (cell) > > ------------------------------------------------------------------------------ > Achieve unprecedented app performance and reliability > What every C/C++ and Fortran developer should know. > Learn how Intel has extended the reach of its next-generation tools > to help boost performance applications - inlcuding clusters. > http://p.sf.net/sfu/intel-dev2devmay > _______________________________________________ > xCAT-user mailing list > xCA...@li... > https://lists.sourceforge.net/lists/listinfo/xcat-user > > > ------------------------------------------------------------------------ > > ------------------------------------------------------------------------------ > Achieve unprecedented app performance and reliability > What every C/C++ and Fortran developer should know. > Learn how Intel has extended the reach of its next-generation tools > to help boost performance applications - inlcuding clusters. > http://p.sf.net/sfu/intel-dev2devmay > > > ------------------------------------------------------------------------ > > _______________________________________________ > xCAT-user mailing list > xCA...@li... > https://lists.sourceforge.net/lists/listinfo/xcat-user -- Rich Sudlow University of Notre Dame Center for Research Computing - Union Station 310 West South St South Bend, In 46601 (574) 807-1046 (cell) |